CVE-2025-21599
HIGHDescription
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes kernel memory to not be freed, resulting in memory exhaustion leading to a system crash and Denial of Service (DoS). Continuous receipt and processing of these packets will continue to exhaust kernel memory, creating a sustained Denial of Service (DoS) condition. This issue only affects systems configured with IPv6. This issue affects Junos OS Evolved: * from 22.4-EVO before 22.4R3-S5-EVO, * from 23.2-EVO before 23.2R2-S2-EVO, * from 23.4-EVO before 23.4R2-S2-EVO, * from 24.2-EVO before 24.2R1-S2-EVO, 24.2R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 22.4R1-EVO.
Is your site exposed to CVE-2025-21599?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
| juniper | junos_os_evolved |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-21599? +
How severe is CVE-2025-21599? +
What products are affected by CVE-2025-21599? +
How do I check if I'm vulnerable to CVE-2025-21599? +
Related Vulnerabilities
A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability …
Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when …
Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered …
imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().
A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall …
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall …